Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-07-22 | T5873: vpn ipsec remote-access: support VTI interfaces | Lucas Christian | |
2024-07-22 | T6599: ipsec: support disabling rekey of CHILD_SA. | Lucas Christian | |
Also adds support for life_bytes, life_packets, and DPD for remote-access connections. Changes behavior of remote-access esp-group lifetime setting to have parity with site-to-site connections. | |||
2024-07-19 | T6362: Create conntrack logger daemon | khramshinr | |
2024-07-18 | openvpn: T6591: deprecate OpenVPN server net30 topology (#3825) | Daniil Baturin | |
2024-07-08 | vxlan: T6505: Support VXLAN VLAN-VNI range mapping in CLI (#3756) | Nataliia S | |
2024-07-05 | wireless: T6496: use mac-address validator on BSSID and move it up one CLI level | Christian Breunig | |
2024-07-05 | wireless: T6496: use ascii regex for WPA passphrase constraint | Christian Breunig | |
2024-07-05 | wireless: T6496: support for EAP-MSCHAPv2 client over wifi | Christopher | |
fix: attempt to fix indentation on `wpa_supplicant.conf.j2` fix: attempt to fix indentation on `wpa_supplicant.conf.j2` fix: incorrect bssid mapping fix: use the correct jinja templating (I think) fix: “remote blank space fix: attempt to fix the formatting in j2 fix: attempt to fix the formatting in j2 feat: rename enterprise username and password + add checks in conf mode. fix: move around `bssid` config option on `wpa_supplicant.conf.j2` and fix the security config part fix: fix indentation on `wpa_supplicant.conf.j2` | |||
2024-07-04 | Merge pull request #3753 from jvoss/haproxy_logging | Christian Breunig | |
T6539: add logging options to load-balancer reverse-proxy | |||
2024-07-03 | T6539: add logging options to load-balancer reverse-proxy | Jonathan Voss | |
2024-07-03 | Merge pull request #3752 from sever-sever/T6538 | Christian Breunig | |
T6538: Add the ability to set GENEVE interfaces to VRF | |||
2024-07-02 | Merge pull request #3721 from HollyGurza/T5878 | Daniil Baturin | |
ssh: T5878: Allow changing the PubkeyAcceptedAlgorithms option | |||
2024-07-02 | T6538: Add the ability to set GENEVE interfaces to VRF | Viacheslav Hletenko | |
2024-06-28 | Merge pull request #3720 from sever-sever/T6477 | Christian Breunig | |
T6477: Add telegraf loki output plugin | |||
2024-06-28 | Merge pull request #3730 from natali-rs1985/T5710-current | Christian Breunig | |
pppoe-server: T5710: Add option permit any-login | |||
2024-06-28 | T6477: Add telegraf loki output plugin | Viacheslav Hletenko | |
Add Loki plugin to telegraf set service monitoring telegraf loki url xxx | |||
2024-06-28 | pppoe-server: T5710: Add option permit any-login | Nataliia Solomko | |
2024-06-28 | ssh: T5878: Allow changing the PubkeyAcceptedAlgorithms option | khramshinr | |
2024-06-27 | wireless: T6320: add 802.11ax at 6GHz | Alain Lamar | |
Authored-By: Alain Lamar <alain_lamar@yahoo.de> | |||
2024-06-24 | T5735: Stunnel CLI and configuration | khramshinr | |
Add CLI commands Add config Add conf_mode Add systemd config Add stunnel smoketests Add log level config | |||
2024-06-20 | T3202: Enable wireguard debug messages | Nataliia Solomko | |
2024-06-20 | Merge pull request #3677 from HollyGurza/T5949 | Christian Breunig | |
T5949: Add option to disable USB autosuspend | |||
2024-06-19 | openconnect: T6500: add support for multiple ca-certificates | Christian Breunig | |
Add possibility to provide a full CA chain to the openconnect server. * Support multiple CA certificates * For every CA certificate specified, always determine the full certificate chain in the background and add the necessary SSL certificates | |||
2024-06-19 | T5949: Add option to disable USB autosuspend | khramshinr | |
2024-06-16 | wireless: T6318: move country-code to a system wide configuration | Christian Breunig | |
Wireless devices are subject to regulations issued by authorities. For any given AP or router, there will most likely be no case where one wireless NIC is located in one country and another wireless NIC in the same device is located in another country, resulting in different regulatory domains to apply to the same box. Currently, wireless regulatory domains in VyOS need to be configured per-NIC: set interfaces wireless wlan0 country-code us This leads to several side-effects: * When operating multiple WiFi NICs, they all can have different regulatory domains configured which might offend legislation. * Some NICs need additional entries to /etc/modprobe.d/cfg80211.conf to apply regulatory domain settings, such as: "options cfg80211 ieee80211_regdom=US" This is true for the Compex WLE600VX. This setting cannot be done per-interface. Migrate the first found wireless module country-code from the wireless interface CLI to: "system wireless country-code" | |||
2024-06-13 | Merge pull request #3639 from natali-rs1985/T5487-current | Daniil Baturin | |
openvpn: T5487: Remove deprecated option --cipher for server and client mode | |||
2024-06-11 | bgp: T6473: missing completion helper for peer-groups inside a VRF | Christian Breunig | |
Using BGP peer-groups inside a VRF instance will make use if the global VRFs peer-group list during tab-completion and not the peer-groups defined within the BGP instance of the given VRF. | |||
2024-06-11 | openvpn: T5487: Remove eprecated option --cipher for server and client mode | Nataliia Solomko | |
2024-06-10 | Merge pull request #3621 from sever-sever/T6442 | Christian Breunig | |
T6442: CGNAT add log for address allocation | |||
2024-06-10 | T6442: CGNAT add log for address allocation | Viacheslav Hletenko | |
Add the configuration command to log current CGNAT allocation set nat cgnat log-allocation | |||
2024-06-10 | T6219: align with system sysctl and limit parameters to supported | Nicolas Vollmar | |
2024-06-10 | container: T6219: Add support for container sysctl / kernel parameters | Ben Pilgrim | |
2024-06-07 | reverse-proxy: T6454: Set default value of http for haproxy mode | Alex W | |
2024-06-06 | Merge pull request #3589 from natali-rs1985/T6423-current | John Estabrook | |
xml: T6423: enforce priority on nodes having an owner | |||
2024-06-06 | xml: T6423: enforce priority on nodes having an owner | Nataliia Solomko | |
2024-06-06 | Merge pull request #3578 from nicolas-fort/raw-hook | Daniil Baturin | |
T3900: Add support for raw tables in firewall | |||
2024-06-04 | T3900: T6394: extend functionalities in firewall; move netfilter sysctl ↵ | Nicolas Fort | |
timeout parameters defined in conntrack to firewall global-opton section. | |||
2024-06-03 | reverse-proxy: T6434: Support additional healthcheck options (#3574) | Alex W | |
2024-05-31 | Merge pull request #3557 from haimgel/T6422/allow-multiple-ns-records | Christian Breunig | |
dns: T6422: allow multiple redundant NS records | |||
2024-05-31 | T5307: QoS - traffic-class-map services (#3492) | Roman Khramshin | |
added new syntax to work with class match filters in QoS policy | |||
2024-05-30 | conntrack: T6396: correction to helper message for custom timeout rule | Giggum | |
2024-05-30 | Merge pull request #3531 from Embezzle/T6409 | Christian Breunig | |
reverse-proxy: T6409: Remove unused backend parameters | |||
2024-05-30 | Merge pull request #3510 from HollyGurza/T4576 | Daniil Baturin | |
T4576: Accel-ppp logging level configuration | |||
2024-05-30 | dns: T6422: allow multiple redundant NS records | Haim Gelfenbeyn | |
NS is unlike CNAME or PTR, multiple NS records are perfectly valid and is a common use case: multiple redundant DNS servers is a common configuration and should be supported. | |||
2024-05-30 | hostname: T6421: enforce explicit CLI priority for host-name and domain-name | Christian Breunig | |
To prevent any possible races in the future the host-name and domain-name nodes should be set with explicit priorities! | |||
2024-05-29 | ISIS: T6332: Fix isis not working only ipv6 | fett0 | |
2024-05-28 | T6406: rename cpus to cpu | Nicolas Vollmar | |
2024-05-28 | T6406: add container cpu limit option | Nicolas Vollmar | |
2024-05-27 | reverse-proxy: T6409: Remove unused backend parameters | Alex W | |
2024-05-27 | T4576: Accel-ppp logging level configuration | khramshinr | |
add ability to change logging level config for: * VPN L2TP * VPN PPTP * VPN SSTP * IPoE Server * PPPoE Serve |